NIST SP 800-171 Compliance Assessment and SPRS Reporting

This contract requires conducting a cybersecurity self-assessment in accordance with the NIST SP 800-171 Revision 1 standards. The contractor must evaluate existing cybersecurity practices against these guidelines, identify gaps, and develop a detailed Plan of Action and Milestones (POA&M) to address any deficiencies and achieve full compliance. Additionally, the contractor is responsible for submitting the assessment results and the POA&M documentation to the Supplier Performance Risk System (SPRS), ensuring the Department of Defense has visibility into the organization's cybersecurity posture. The work will be performed as a subcontract for the ASC Commodities Division under the Department of Defense, with the place of performance located in New Cumberland, Pennsylvania (ZIP code 17070-5002). The contract falls under the NAICS code 541611, which covers administrative management and general management consulting services. The solicitation was posted on May 13, 2026, with a response deadline of May 21, 2026. This engagement plays a critical role in helping suppliers meet cybersecurity requirements and maintain eligibility for DoD contracts by ensuring adherence to federal cybersecurity standards and proper reporting through SPRS.